Timeframe: Mittwoch 14-10-2026 18:00 – Donnerstag 15-10-2026 18:00
Handler: Michael Schlagenhaufer
Co-Handler: n/a
News
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls.
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora-s Built-in CODE App
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. [..] The flaw allows an unauthenticated request to run a command on the server, but only when the app's local document server is not running, such as during a restart or upgrade, or after a crash. Collabora fixed it in version 26.4.303 on September 11 and on October 14 published an advisory with the identifier CVE-2026-110447, warning that turning off the app does not help: it must be updated or removed.
https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be chained to sidestep authentication and execute arbitrary commands on affected systems. [..] Although the vulnerabilities were initially assumed to be addressed in AhsayCBS versions 9.15.2.59 and 10.3.4.0 released in August 2026, the software company has now confirmed that the patches did not completely plug them.
https://thehackernews.com/2026/10/ahsaycbs-flaws-exploited-to-deploy-web.html
Sextortion -help- firm took $60 million from victims, FTC alleges
The FTC accuses Digital Forensics Corporation and affiliated companies of exploiting people seeking help with intimate-image blackmail.
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64 malware.
https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/
Researchers Uncover Thousands of Phishing Domains Hiding Behind Inactive Pages
A domain returns a blank page. Maybe a generic -Not Found- message. There is no login form, suspicious branding, or obvious phishing content to investigate. Yet the phishing site may still be there. Check Point Exposure Management researchers uncovered a large scale, multi region phishing infrastructure designed to conceal active campaigns behind seemingly inactive domains.
Verwanzte Krypto-Wallets von Ledger: Problem größer als gedacht
Jemand baut heimlich LTE-Modems in neue Kryptowallets ein. Käufer haben über 100 Millionen Dollar verloren. Hersteller Ledger kommuniziert wenig.
Vulnerabilities
Kritische Sicherheitslücke in Cisco Secure Email Gateway – aktiv ausgenutzt – Updates verfügbar – CVE-2026-76519
In der Funktion Advanced Malware Protection (AMP) von Cisco Secure Email Gateway existiert eine kritische Sicherheitslücke. Laut Cisco wird die Sicherheitslücke bereits aktiv ausgenutzt. [..] Nicht authentifizierte Angreifer:innen können aus der Ferne durch das Versenden einer E-Mail mit einem präparierten Anhang über ein betroffenes Gerät beliebige Dateien auf dem zugrundeliegenden Betriebssystem schreiben und Befehle mit root-Rechten ausführen.
Next.js Security Update for Upstream Vulnerabilities
Last week we announced an upcoming out-of-band security update for Next.js, including two fixes postponed from the September security release due to upstream dependency delays. Updates are now available in v16.4.1 (Active LTS) and v15.5.28 (Maintenance LTS) to address these issues. [..] Unauthenticated Remote Code Execution in use cache functions returning typed arrays (Critical Severity) [..] Unauthenticated Remote Code Execution in the Image Optimization API when using SVG (Critical Severity)
https://nextjs.org/blog/nextjs-security-update-october-14-2026
Juniper Security Advisories 14.10.2026
Juniper has released 17 new security advisories. (6x critical)
[…]
Content was trimmed to protect the source. Please visit the original article for the full text.
Lesen Sie den originalen Artikel: